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AMENDMENT TO THE CLAIMS 

1 . (witlidrawn) A method for producing at least one ciphertext block from at least 
one plaintext block using a block cipher E and a key K, the method comprising: 

receiving n plaintext blocks, wherein n is an integer greater than 0; 

setting Qo equal to an initial value; and 

for each plaintext block of the n plaintext blocks: 

computing Qi = EkCQi-i) XOR Pi ; and 

computing Ci = M(Pi , Qi), 

thereby producing n ciphertext blocks, 
wherein: 

0 < i <= n, and 

Pj denotes an i-th plaintext block of the n plaintext blocks, and 

Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 

M is a selector function which, for each bit Cij of block Ci, selects a fibrst 

argument of M if bit Pjj is not to be encrypted, and selects a second argument of M if bit 

Pij is to be encrypted. 

2. (withdrawn) The method according to claim 1 and wherein M is chosen in 
accordance with a standard indicating bits that are not to be encrypted. 

3. (withdrawn) The method according to claim 2 and wherein the standard 
comprises one of the following: an audio standard; a video standard; and an audio-video 
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standai-d. 

4. (withdrawn) The method according to claim 3 and wherein the standard 
comprises MPEG-2. 

5. (withdrawn) A method for producing at least one ciphertext block from at least 
one plaintext block using a block cipher E and a key K, the method comprising: 

receiving n plaintext blocks, wherein n is an integer greater than 0, and an initial 
value rV; 

computing IV' = M(Pi , IV); 

computing Qo = H(TV'); and 

for each plaintext block of the n plaintext blocks: 

computing Qi = EkCQi-i) XOR Pi ; and 

computing Ci = M(Pi , Qi), 

thereby producing n ciphertext blocks, 
wherein: 

0 < i <= n, and 

H is a hash function, and 

Pj denotes an i-th plaintext block of the n plaintext blocks, and 
Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cij of block Cj, selects a first 
argument of M if bit Pij is not to be encrypted, and selects a second argument of M if bit 
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Pij is to be encrypted. 



6. (withdrawn) The method according to claim 5 and wherein H comprises SHAl . 

7. (withdrawn) The method according to claim 5 and wherein H(IV) comprises 

Ek(IV') xoriv. 



8. (withdrawn) The method according to claim 5 and wherein M is chosen m 
accordance Avith a standard indicating bits that are not to be encrypted. 

9. (withdrawn) The method according to claim 8 and wherein the standard 
comprises one of the following: an audio standard; a video standard; and an audio-video 
standard. 

10. (withdrawn) The method according to claim 9 and wherein the standard 
comprises MPEG-2. 

1 1 . (withdrawn) In a method for producing at least one ciphertext block from at 
least one plaintext block using a block cipher E and a key K in a stream mode, wherein Pi 
denotes an i-th plaintext block, and Q denotes an i-th ciphertext block, an improvement 
comprising: 

for each bit Cy of block C] , selecting Py as an output if bit Pij is not to be 
encrypted. 
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12. (witlidrawn) The method according to claim 1 1 and wherein the stream mode 
comprises CFM mode. 

13. (withdrawn) Apparatus for producing at least one ciphertext block from at least 
one plaintext block using a block cipher E and a key K, the at least one plaintext block 
comprising n plaintext blocks, the at least one ciphertext block comprising n ciphertext 
blocks, wherein n is an integer greater than 0, the apparatus comprising: 

an initiaUzation unit for setting Qo equal to an initial value; and 

a computation xmit operative, for each plaintext block of the n plaintext blocks: 

to compute Qi = EK(Qi-i) XOR Pi ; and 

to compute Q = M(Pi , Qi), 

wherein: 

0 < i <= n, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 

Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 

M is a selector ftmction which, for each bit Cij of block Ci , selects a first 

argument of M if bit Pij is not to be encrypted, and selects a second argument of M if bit 

Pij is to be encrypted. 

14. (withdrawn) Apparatus for producing at least one ciphertext block from at least 
one plaintext block using a block cipher E, a key K, and an initial value IV, the at least 
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one plaintext block comprising n plaintext blocks, the at least one ciphertext block 

comprising n ciphertext blocks, wherein n is an integer greater than 0, the apparatus 

comprising: 

a first computation unit for computing IV' = M(Pi , TV); 

a second computation unit for computing Qo = H(IV'); and 

a tliird computation unit operative, for each plaintext block of the n plaintext 

blocks: 

to compute Qi = EkCQi-i) XOR Pi ; and 
to compute Ci = M(Pi , Qi), 

wherein: 

0 < i <= n, and 

H is a hash function, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 

Cj denotes an i-th ciphertext block of the n ciphertext blocks, and 

M is a selector function which, for each bit Cij of block Cf , selects a first 

argument of M if bit Pij is not to be encrypted, and selects a second argument of M if bit 

Py is to be encrypted. 

1 5 , (withdrawn) In apparatus for producing at least one ciphertext block firom at 
least one plaintext block using a block cipher E and a key K in a stream mode, wherein Pi 
denotes an i-th plaintext block, and Ci denotes an i4h ciphertext block, an improvement 
comprising: 
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a selector miit operative, for each bit Cy of block Ci , to select Py as an output if 
bit Py is not to be encrypted. 

16. (withdrawn) A method for producing at least one plaintext block from at least 
one ciphertext block encrypted using a block cipher E and a key K, the method 

comprising: 

receiving n ciphertext blocks, where n is an integer greater than 0; 

setting Qo equal to an initial value; and 

for each ciphertext block of the n ciphertext blocks: 

computing Q*i = EkCQi-i) XOR Ci ; 

computing Pi = M(Ci , Q*i); and 

computing Qi = M(Q^i , Cj), 

thereby producing n plaintext blocks, 
wherein: 

0 < i <= n, and 

Pj denotes an i-th plaintext block of the n plaintext blocks, and 

Ci denotes an i-th ciphertext block of the n ciphertext blocks, and ' 

M is a selector function which, for each bit Cij of block Cj , selects a first 

argument of M if bit Pij is not encrypted, and selects a second argument of M if bit Pij is 

encrypted. 

17. (withdrawn) The method according to claim 16 and wherein M is chosen in 
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accordance with a standard indicating bits that are not encrypted 

1 8. (withdrawn) The method according to claim 17 and wherein the standard 
comprises one of the following: an audio standard; a video standard; and an audio-video 
standard. 

19. (withdrawn) The method according to claim 18 and wherein the standard 
comprises MPEG-2. 

20. (withdrawn) A method for producing at least one plaintext block from at least 
one ciphertext block using a block cipher E and a key K, the method comprising: 

receiving n ciphertext blocks, wherein n is an integer greater than 0, and an initial 
value IV; 

computing IV' = M(Pi , IV); 
computing Qo = H(IV); and 
for each ciphertext block of the n ciphertext blocks: 
computing Q*i = ExCQi-i) XOR Ci ; 
^ computing Pi = M(Ci , Q'i); and 

computing Qi = M(Q'i , Ci), 

thereby producing n plaintext blocks, 
wherein: 

0 < i <= n, and 

H is a hash function, and 
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Pi denotes an i-th plaintext block of the n plaintext blocks, and 
Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cy of block Ci , selects a first 
argument of M if bit Pjj is not encrypted, and selects a second argument of M if bit Pij is 

encrypted. 

21 . (withdrawn) The method according to claim 20 and wherein H comprises 
SHAl. 

22. (withdrawn) The method according to claim 20 and wherein H(IV') comprises 
Ek(IV) XORIV. 

23. (withdrawn) The method according to claim 20 and wherein M is chosen in 

accordance with a standard indicating bits that are not encrypted. 

24. (withdrawn) The method according to claim 23 and wherein the standard 
comprises one of the following: an audio standard; a video standard; and an audio-video 
standard. 

25. (withdrawn) The method according to claim 24 and wherein the standard 
comprises MPEG-2. 

26. (withdrawn) In a method for producing at least one plaintext block jfrom at least 
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one cipliertext block using a block cipher E and a key K in a stream mode, wherein Pj 
denotes an i-th plaintext block of the plurality of plaintext blocks, and Ci denotes an i-th 
ciphertext block of the plurality of ciphertext blocks, an improvement comprising: 

for each bit Py of block Pj , selecting Cy as an output if bit Cy is not encrypted. 

27. (withdrawn) The method according to claim 26 and wherein the stream mode 
comprises CFM mode. 

28. (withdrawn) Apparatus for producing at least one plaintext block from at least 
one ciphertext block encrypted using a block cipher E and a key K, the at least one 
ciphertext block comprising n ciphertext blocks, the at least one plaintext block 
comprising n plaintext blocks, wherein n is an integer greater than 0, the apparatus 
comprising: 

initiaUzation apparatus for setting Qo equal to an initial value; and 

a computation unit operative, for each ciphertext block of the n ciphertext blocks: 

to compute Q'l = Ek(Qm) XOR Ci ; 

to compute Pi = M(Ci , Q*i); and 

to compute Qi = M(Q^i , Ci), 

wherein: 

0 < i <= n, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 
Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 
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M is a selector function which, for each bit Cy of block Q , selects a first 
argument of M if bit Py is not encrypted, and selects a second argument of M if bit Py is 
encrypted. 

29. (withdrawn) Apparatus for producing at least one plaintext block from at least 
one ciphertext block using a block cipher E and a key IC, the at least one ciphertext block 
comprising n ciphertext blocks, the at least one plaintext block comprising n plaintext 
blocks, wherein n is an integer greater than 0, the apparatus comprising: 
a first computation unit for computing TV' = M(Pi , IV); 
a second computation unit for computing Qo = H(IV'); and 
a third computation unit operative, for each ciphertext block of the n ciphertext 

blocks: 

to compute Q^i = EK(Qi.i) XOR Q ; 
to compute Pj = M(Ci , Q\); and 
to compute Qi = M(Q'i , Ci), 

wherein: 

0 < i <= n, and 

H is a hash fimction, and 

Pj denotes an i-tht plaintext block of the n plaintext blocks, and 
Cj denotes an i-th ciphertext block of the n ciphertext blocks, and 
M is a selector fimction which, for each bit Cy of block Ci , selects a first 
argument of M if bit Py is not encrypted, and selects a second argument of M if bit Py is 
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encrypted. 

30. (withdrawn) In apparatus for producing at least one plaintext block from at least 
one ciphertext block using a block cipher E and a key K in a stream mode, wherein Pi 
denotes an i~th plaintext block of the plurality of plaintext blocks, and Cj denotes an i-th 
ciphertext block of the plurality of ciphertext blocks, an improvement comprising: 

a selector unit operative, for each bit Py of block Pi , to select Cij as an output if 

bit Cij is not encrypted. 

3 1 . (previously presented) A system for scrambling/descrambling packets, comprising 
a scrambUng/descrambling device to scramble/descramble the packets based on an hiitial 
Value and a Key, each of the packets havmg a must stay clear (MSG) section which must 
always stay in the clear, the Initial Value for each of the packets being a function of at 
least part of the MSG section of an associated one of the packets behig processed. 

32. (previously presented) The system according to claim 31, wherein the MSG 
section includes an adaptation field, the Initial Value being a function of at least part of 
the adaptation field of the one packet being processed. 

33. (previously presented) The system according to claim 32, wherein the Initial Value 
is a function of the data content of the adaptation field of the one packet being processed. 

34. (previously presented) A method for scrambling/descrambling packets, each of the 
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packets having a must stay clear (MSG) section which must always stay in the clear, the 
method comprising: 

detemiining an Initial Value for each of the packets as a function of at least part of 
the MSG section of an associated one of the packets being processed; and 

scrambling/descrambling the packets based on the Initial Value and a Key. 

35. previously presented) The method according to claim 34, wherein the MSG 
section includes an adaptation field, the determining including deterniining the Initial 

Value as a function of at least part of the adaptation field of the one packet being 
processed. 

36. (previously presented) The method according to claim 35, wherein the 
determining includes determining the Initial Value as a function of the data content of the 
adaptation field of the one packet being processed. 

37. (withdrawn) Apparatus for producing at least one ciphertext block from at least 
one plaintext block using a block cipher E and a key K, the at least one plaintext block 
comprising n plaintext bloclcs, the at least one ciphertext block comprising n ciphertext 
blocks, wherein n is an integer greater than 0, the apparatus comprising: 

means for setting Qo equal to an initial value; and 
means for computing: 

Qi = EK(Qi-i)XORPi;and 

Ci = M(Pi , Qi), for each plaintext block of the n plaintext blocks, 
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wherein: 

0 < i <= n, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 

Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 

M is a selector function which, for each bit Cy of block Ci, selects a iHrst 

argument of M if bit Py is not to be encrypted, and selects a second argument of M if bit 

Pjj is to be encrypted. 

38. (witlidrawn) Apparatus for producing at least one ciphertext block from at least 
one plaintext block using a block cipher E, a key K, and an initial value IV, the at least 
one plaintext block comprising n plaintext blocks, the at least one ciphertext block 
comprising n ciphertext blocks, wherein n is an integer greater than 0, the apparatus 
comprising: 

means for computing IV' = M(Pi , IV); 

means for computing Qo = H(IV'); and 
means for computing: 

Qi = EK(Qi-i)XORPi;aiid 

Ci = M(Pi 5 Qi), for each plaintext block of the n plaintext blocks, 

wherein: 

0 < i <= n, and 

H is a hash function, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 
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Cf denotes an i-th ciphertext block of the n ciphertext blocks, and 

M is a selector fimction which, for each bit Cy of block Ci, selects a first 

argument of M if bit Py is not to be encrypted, and selects a second argument of M if bit 

Pjj is to be encrypted. 

39. (withdrawn) Apparatus for producing at least one plaintext block from at least 
one ciphertext block encrypted using a block cipher E and a key K, the at least one 
ciphertext block comprising n ciphertext blocks, the at least one plaintext block 
comprising n plaintext blocks, wherein n is an integer greater than 0, the apparatus 
comprising: 

means for setting Qo equal to an initial value; and 
means for computing: 

Q'i = EK(QM)XORCi; 

Pi = M(Ci , Q'i); and 

Qi = M(Q'i 5 Ci), for each ciphertext block of the n ciphertext blocks, 

wherein: ^ 
0 < i <= n, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 
Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 
M is a selector function which, for each bit Cij of block Ci, selects a first 
argument of M if bit Pij is not encrypted, and selects a second argument of M if bit Pij is 
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encrypted. 

40. (withdrawn) Apparatus for producing at least one plaintext block from at least 
one ciphertext block using a block cipher E and a key K, the at least one ciphertext block 
comprising n ciphertext blocks, the at least one plaintext block comprising n plaintext 
blocks, wherein n is an integer greater than 0, the apparatus comprising: 

means for computing IV* = M(Pi , IV); 

means for computing Qo = H(IV); and 

means for computing: 

Q'i = EK(Qi-i)XORCi; 

Pi = M(Ci , Q^i); and 

Qi = M(Q*i 5 Ci), for each ciphertext block of the n ciphertext blocks, 

wherein: 

0 < i <= n, and 

H is a hash function, and 

Pi denotes an i-th plaintext block of the n plaintext blocks, and 

Ci denotes an i-th ciphertext block of the n ciphertext blocks, and 

M is a selector function which, for each bit Cij of block Cj, selects a first 

argument of M if bit Pij is not encrypted, and selects a second argument of M if bit Pij is 

encrypted. 
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41 . (new) The system according to claim 3 1 wherein the Initial Value is an 
Initialization Vector, 

42. (new) The method according to cUam 34 wherein the hiitial Value is an 
Initialization Vector. 
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